https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:38:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351150 EUVD-2026-351150 https://cve.radiocsirt.org/vuln/euvd-2026-351150 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56020 <p>The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.202.</p> <p>The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.202.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56020 https://cve.radiocsirt.org/vuln/ghsa-23xj-gfh3-wf2h <p>The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.</p> <p>The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.</p> https://cve.radiocsirt.org/vuln/ghsa-23xj-gfh3-wf2h https://cve.radiocsirt.org/vuln/va-26-169-02 <p>The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.202. Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern. Webmin accepts basic authentication without session cookies when an attacker provides the &#39;User-Agent: webmin&#39; header, allowing bypass of additional MFA requirements. Fixed in 2.640.</p> <p>The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.202. Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern. Webmin accepts basic authentication without session cookies when an attacker provides the &#39;User-Agent: webmin&#39; header, allowing bypass of additional MFA requirements. Fixed in 2.640.</p> https://cve.radiocsirt.org/vuln/va-26-169-02 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2014 <p>Ein Angreifer kann mehrere Schwachstellen in Webmin ausnutzen, um falsche Informationen darzustellen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Webmin ausnutzen, um falsche Informationen darzustellen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2014